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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of lime may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days v^ll be considered timely. 

- If NO period for reply is specified above, the maximum statutory period v^ll apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)E1 Responsive to connnnunication(s) filed on 23 May 2005 . 
2a)S This action is FINAL. 2b)n This action is non-final. 

3) n Since this application is in condition for allowance except for fomial matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1 935 CD. 11 , 453 O.G. 213. 

Disposition of Claims 

4) 13 Claim(s) 1 2. 4-8. 10-16.18-21, 23-27. 29-35,37-40, 43 and 45-5 1 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) 0 Claim(s) is/are rejected. 

7) 13 Claim(s) 2.21 and 40 is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) n The specification is objected to by the Examiner. 

10)0 The drawing(s) filed on is/are: a)0 accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held In abeyance. See 37 CFR 1.85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or fomri PTO-152. 

Priority under 35 U.S.C. § 119 

12)0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (0- 
a)n All b)n Some * 0)0 None of: 

1 .□ Certified copies of the priority documents have been received. 

2.n Certified copies of the priority documents have been received in Application No. . 



3.D Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 



Response to Amendment 



1 . Applicant's arguments with respect to claims 1, 20 and 39 have been considered but 
are moot in view of the new ground(s) of rejection. 

Claim Objections 

2. Claims 2, 21, and 40 are objected to. In particular, the line "identifying certain of the 
plurality of network elements in the stored profile" fails to provide a subject after the 
word "certain". The examiner does not know what the applicant is "identifying certain". 



Claim Rejections - 35 USC § 103 
3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 
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Claims 1, 2, 4-8, 18, 19, 20, 21, 23-27, 37-39, 40, 43, and 45 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Gilchrist US 6,167,517, in view of Baulier US 
6,157,707 in view of Chaganti US 6,845,448 



As per claims 1, 19, 20, 38 and 39, Gilchrist teaches a security system that receives a 
message indicating a request for access to onUne resources, (Col 5 hnes 57-62). Gilchrist 
teaches that the authentication system obtains an indicia of physical identification from 
the user, (Col 5 lines 30-36). Gilchrist teaches the obtained indicia is compared with a 
previously stored indicia and approving the request if the indicia match, (Col 5 line 62 to 
Col 6 line 1$, Col 6 lines 35-42). 

Gilchrist teaches levels of authentication, (Col 4 Unes 16-18), but does not specifically 
state one level is zero, or no authentication, Gilchrist does not teach stored business rules 
for authentication. 

Baulier teaches a scoring system to determine whether a user needs to be authenticated or 
not, (Col 10 lines 9-14). 

It would have been obvious to one of ordinary skill in the art to have one of the levels of 
authentication of Gilchrist be no authentication, so that certain systems could be easily 
accessed. 

Chaganti teaches stored business rules (pohcies) regarding authentication, (Col 10 lines 
8-16). Chaganti teaches identifying companies for use with security rules, (Col 10 Unes 
23-29). Chaganti teaches allowing a user to set up security business rules, (Col 9 lines 
22-26). It would have been obvious to one of ordinary skill in the art to combine the 
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rules database of Chaganti with the rule evaluation of Gilchrist-Baulier so that a central 
authentication system can carry out multiple policies for separate companies. 

As per claims 2, 21, and 40, Gilchrist teaches stored policies indicating whether 
authentication is required or not for access to different servers, (Col 4 lines 10-19). 
Gilchrist does not teach using history, and a scoring method to determine the level of 
authentication needed. 

Baulier teaches a scoring method of determining whether of not a user is required to be 
authenticated, (Col 10 lines 7-24). Baulier teaches that the users history patterns are 
employed, (Col 6 lines 26-30, Col 9 lines 62-64). 

It would have been obvious to on skilled in the art to use a scoring system to determine 
whether authentication was required because it reduces costs and fraud, (Baulier Col 3 
lines 5-10). 

As per claims 4-5, 23, and 24, Gilchrist teaches stored policies indicating whether 
authentication is required or not for access to different servers, (Col 4 lines 10-19). 
As per claims 6, and 25 Gilchrist teaches determining whether a user is hsted as being 
completely denied access, and denying said access, (Col 4 hnes 40-50). 
As per claims 7, 8, 26, and 27 Gilchrist does not teach determining fraudulent behavior. 
Baulier teaches detecting fraud based on a collision or velocity violation, (Col 6 lines 50- 
67). It would have been obvious to one of ordinary skill in the art to add the fraud 
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detection of Baulier to the biometric authentication system of Gilchrist because fraud is a 
significant financial problem, (Gilchrist Col 1 lines 28-40). 

As per claims , 18, 37, and 45, Gilchrist teaches that the indicia is a biometric sample, 
(Col 5 Unes 30-36). 

As per claim 43, BauUer teaches a user profile to determine fraudulent behavior, (Col 5 
lines 47-58). 

As per claim 45, Gilchrist teaches a database of biometric data, (Col 4 hnes 1 1-14). 



Claims 46-51 are rejected under 35 U,S,C, 103(a) as being unpatentable over 
Gilchrist US 6,167,517, in view of Baulier US 6,157,707 in view of Chaganti US 
6,845,448 in view of Spiegel US 6,466,918. 

As per claims 46-51, the previous Gilchrist-Bauher-Chaganti combination teaches using 
a scoring system for authentication. Gilchrist-Baulier-Chaganti does not teach weighing 
scores. 

Spiegel teaches a method of weighing scores based on user activity and user history, (Col 
13 Unes 40-50, Col 14 Unes 1-7). Spiegel teaches that system administrators may alter 
the weights, (Col 13 lines 43-45). 
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It would have been obvious to one of ordinary skill in the art to add the weighing method 
of Spiegel to the scoring method of Gilchrist-Baulier-Chaganti because not all factors in 
the decision to authenticate are of equal value. 

All other rejections can be found from the previous office action below: 

Claims 10-16, and 29-35 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Gilchrist US 6167,517 in view of BauHer US 6,157,707 in view of Chaganti US 
6,845,448 in view of Blonder US 5,708,422. 

As per claims 10-13, and 29-32 the previous Gilchrist-BauHer-Chaganti combination 
does not teach other criteria of authorization if authentication is not required. 
Blonder teaches other criteria of authorization using a card transaction including 
frequency of use, (Col 6 lines 28-37). Blonder teaches a card transaction with restrictions 
and denying the transaction if the restrictions (frequency of use) are not satisfied, (Col 10 
lines 8-20), Blonder teaches that the restrictions may be apphed to credit card 
transactions or debit card account transactions, (Col 4 lines 53-66). 
It would have been obvious to one skilled in the art to add the account restrictions of 
Blonder to the biometric authentication system of Gilchrist-Baulier-Chaganti 
combination because Blonders system helps prevent financial fraud. 
As per claims 14, and 33 the Gilchrist-Baulier-Chaganti combination teaches an account 
that restricts an account associated with a user, (Col 4 lines 40-50). The Gilchrist- 
Baulier-Chaganti combination does not teach determining an account transaction. 
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Blonder teaches that the restrictions may be applied to credit card transactions or debit . 
card account transactions, (Col 4 lines 53-66). 

As per claims 15, 16, 34, and 35 the Gilchrist-Bauiier-Chaganti combination teaches an 
account that restricts an account associated with a user, (Col 4 lines 40-50). Gilchrist- 
Baulier-Chaganti combination does not teach parental control 
Blonder teaches parental control of a transaction, (Col 5 lines 18-24). 



Conclusion 

4. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of the 
advisory action. In no event, however, will the statutory period for reply expire later than 
SIX MONTHS from the date of this final action. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Christopher J Brown whose telephone number is 
(571)272-3833. The examiner can normally be reached on 8:30-6:00. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gregory Morse can be reached on (571)272-3838. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 
Information regarding the status of an appHcation may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for pubUshed 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished appUcations is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 

Christopher J Brown 6/6/05 




David Y. Jung 
Primary Examir 




